PRIVACY POLICY AND PERSONAL DATA PROTECTION

AFI CAR UTILAJE SRL
Last updated: 02 / 12 / 2025

1. Who We Are

AFI CAR UTILAJE SRL, headquartered in Ilfov County, Glina Commune, Str. Bucuriei no. 50, Romania, is the controller of your personal data.

You can contact us at:
Email: dpo@aficar.ro
Website: www.aficar.ro

We are committed to protecting your privacy and using your personal information solely for legitimate purposes, under maximum security conditions.

2. What Data We Collect

We collect only the information necessary, depending on how you interact with us. This may include:

2.1. Contact Data

  • First and last name
  • Phone number, email address
  • Address (if required for contractual purposes)

2.2. Professional Data

  • Information contained in CVs (experience, education, certifications)
  • References voluntarily provided

2.3. Technical Data When Visiting the Website

  • IP address
  • Browser and device information
  • Pages visited
  • Cookies, analytics

2.4. Data Required for Contractual Relations

  • Financial data (IBAN, company details, registration code, legal representative)
  • Signatures, contracts, warranties
  • Vehicle-related information (serial numbers, photos, RAR documents, delivery documentation)

2.5. Security Data – CCTV

Our premises use video surveillance systems.
These may include images of individuals, date and time of visit.

2.6. Data from Correspondence

  • Emails
  • Contact form submissions
  • Messages sent via social media

3. How We Collect Data

Data may come from:

  • The contact form on the website
  • Contracts, orders, quotations
  • Visits to our premises (including CCTV systems)
  • Social media (Facebook, Instagram, LinkedIn)
  • Recruitment platforms (eJobs, LinkedIn)
  • Telephone or email interactions

4. Why We Collect Data – Purposes of Processing

4.1. To communicate with you

  • responding to inquiries
  • providing commercial information
  • sending personalized offers (with consent)

4.2. For recruitment

  • evaluating your application
  • scheduling interviews
  • communication during the selection process

4.3. For delivering contracted services

  • quotations, invoicing, payments
  • vehicle handover–acceptance
  • preparing RAR / ISCIR documents
  • warranties, service interventions, technical inspections

4.4. For fulfilling legal obligations

  • accounting records
  • reporting to authorities
  • archiving documents in accordance with the law

4.5. For securing our premises

  • CCTV monitoring
  • preventing incidents, theft, or damage

4.6. Marketing and commercial communications

Only with your explicit consent.

5. Legal Basis for Processing

We process your data based on:

  • Art. 6(1)(a) GDPR – consent (newsletter, marketing)
  • Art. 6(1)(b) GDPR – performance of the contract
  • Art. 6(1)(c) GDPR – legal obligation
  • Art. 6(1)(f) GDPR – legitimate interest (security, service improvement, asset protection)

6. Data Retention Period

6.1. Inquiries / Emails without Contract

  • Up to 6 months.

6.2. Contractual Relations

  • For the duration of the collaboration + 10 years (according to fiscal legislation).

6.3. CVs and Recruitment

  • 12 months, unless you request deletion earlier.

6.4. CCTV Recordings

  • Stored between 15 and 30 days, depending on storage capacity, with the possibility of extension in case of an incident.
  • After the retention period expires, the data is deleted or anonymized.

7. Who We Share Your Data With

We share data only with necessary partners, under secure conditions:

  • IT providers and hosting services
  • Accounting services
  • Courier companies
  • Email marketing platforms
  • RAR / IGSU / ISCIR / authorities when required by law
  • External auditors and consultants

All partners are contractually required to comply with GDPR rules.

8. Cookie Policy

The website www.aficar.ro uses:

  • technical cookies
  • analytics cookies (Google Analytics or similar)
  • preference cookies

You can manage cookies directly from your browser.
A detailed Cookie Policy is available on the website, here: https://aficar.ro/cookie-policy/

9. Your GDPR Rights

According to Regulation (EU) 679/2016, you have the following rights:

  • right of access
  • right to rectification
  • right to erasure (“right to be forgotten”)
  • right to restrict processing
  • right to data portability
  • right to object
  • right to withdraw consent
  • right to lodge a complaint with ANSPDCP

To exercise your rights, contact us at: dpo@aficar.ro

10. Data Security

We apply modern technical and organizational measures to protect your data:

  • restricted access
  • CCTV systems
  • internal IT policies
  • protection against cyber-attacks
  • controlled backups

No method is completely infallible, but we take all reasonable measures to ensure the security of your personal data.

11. Policy Updates

We reserve the right to update this policy whenever necessary.
We encourage you to periodically review the Privacy section on our website.